Family & Children's Services of Mid Michigan

The covered entity (CE), Family & Children’s Services of Mid Michigan, Inc., reported that its server was attacked by a ransomware virus. The breach affected 981 individuals. The type of electronic protected health information (ePHI) involved included names, dates of birth, addresses, Social Security numbers, telephone numbers, financial information, medications prescribed, and clinical information. Family & Children’s Services provided notification of the breach to HHS, all affected individuals, and the media. The covered entity strengthened its password requirements, conducted a risk analysis, and implemented a risk management plan. The covered entity provided documentation of these corrective steps to OCR.